| phaidros | my irc live on my server, just need a dumb term with ssh :) | 00:00 |
|---|---|---|
| phaidros | s/live/lives | 00:00 |
| [Solars] | heh | 00:00 |
| [Solars] | so it said it re-added | 00:00 |
| [Solars] | cat /proc/mdstat shows all | 00:01 |
| [Solars] | but still inactive | 00:01 |
| phaidros | but all are in? | 00:02 |
| [Solars] | yea | 00:02 |
| [Solars] | all 4 parts | 00:02 |
| phaidros | hm, what does swapon -a say? | 00:04 |
| phaidros | (maybe use /dev/md2 in fstab) | 00:04 |
| [Solars] | swapon -a still gave same complaint | 00:05 |
| phaidros | hm, ok. | 00:05 |
| phaidros | so: mdadm --stop /dev/md2 | 00:05 |
| [Solars] | the raid needs to be active | 00:05 |
| phaidros | we shut it down | 00:06 |
| [Solars] | also... blkid doesn't show uuid for that device | 00:06 |
| [Solars] | kk lets stop it! | 00:06 |
| phaidros | and reassemble with: mdadm --assemble .. | 00:06 |
| phaidros | that would rebuild the created (once with --create) raid device | 00:06 |
| [Solars] | got an error! | 00:07 |
| [Solars] | after entering | 00:07 |
| phaidros | what does it say? | 00:07 |
| [Solars] | mdadm --assemble /dev/md2 /dev/sda2 ... /dev/sdd2 | 00:08 |
| [Solars] | i got | 00:08 |
| [Solars] | mdadm:/dev/md2 assembled from 3 drives - not enough to start array while not clean - consider -force | 00:08 |
| phaidros | hm, strange | 00:10 |
| [Solars] | so i guess gotta figure out how to clean the four drives | 00:10 |
| phaidros | what does your /etc/mdadm/mdadm.conf say about that md2 ? | 00:10 |
| phaidros | (maybe only 3 listet) | 00:11 |
| [Solars] | nope | 00:11 |
| [Solars] | shows it with 4 drives with raid 5 | 00:12 |
| phaidros | so, 3 possibilities: use --force for assemble or try assamble with --scan (to see what is does) | 00:12 |
| phaidros | 2nd: leave as is | 00:12 |
| [Solars] | erm lets break it then reassemble with scan | 00:12 |
| phaidros | 3rd: consider having a non raid swap. (i usually not raid my swaps) and mount 4 of them with same prio :) | 00:12 |
| [Solars] | or can i run scan w/o breaking | 00:12 |
| phaidros | nope. assemble wants to setup new imho. but try | 00:13 |
| phaidros | http://www.racmar.com/content/view/27/42/ | 00:15 |
| phaidros | someone with the same issue :) | 00:15 |
| === ScottK-vacation is now known as ScottK | ||
| [Solars] | failed to RUN_ARRAY /dev/md2: Input/Output error | 00:17 |
| [Solars] | using the cmd mdadm --assemble --scan --force | 00:17 |
| phaidros | hm, I'm runnind out ideas now .. | 00:18 |
| phaidros | what does fdisk say about sdd ? | 00:19 |
| [Solars] | wonder if i have to use the alt-cd and go to rescue mode and rebuild that partition | 00:19 |
| [Solars] | fdisk shows all partitions | 00:19 |
| phaidros | nope. it is not in use. so you could rebuild it | 00:20 |
| phaidros | just be careful about device numbering | 00:20 |
| phaidros | maybe deleting in fdsik is not so clever .. | 00:20 |
| phaidros | not sure | 00:20 |
| phaidros | is it a server machine? | 00:21 |
| [Solars] | i rebooted just to see if it would work... all points are shown in /proc/mdstat but are syncing | 00:22 |
| phaidros | good :) | 00:22 |
| [Solars] | this isn't used as a server machine | 00:22 |
| phaidros | this will take a while, after that either swapon or creating mkswap before should work :) | 00:22 |
| [Solars] | but not shown in mount | 00:22 |
| phaidros | swap is never shown in mount | 00:23 |
| phaidros | you only see with swapon -s | 00:23 |
| * flyback swears this is the last canucking time he spends half or all of his weekend working on work stuff even just remote | 00:23 | |
| phaidros | lol @ flyback | 00:23 |
| phaidros | isn't it always 'terminal-time' ? | 00:24 |
| phaidros | sometimes i even find it very refreshing :) | 00:24 |
| phaidros | odd, eh? | 00:24 |
| [Solars] | erm swapon -on doesn't show anything | 00:24 |
| phaidros | swapon -s | 00:24 |
| [Solars] | er i ment -s | 00:25 |
| phaidros | yeah, because the device is still under rebuild | 00:25 |
| [Solars] | and mkswap /dev/md2 complains about not having enough space | 00:25 |
| phaidros | until this is done, waiting is the game :) | 00:25 |
| [Solars] | so i gotta wiat | 00:25 |
| phaidros | argh -- | 00:25 |
| phaidros | rebuild is done? | 00:25 |
| [Solars] | lemme check again | 00:25 |
| phaidros | sometimes this can take ages (it lasted 2 hours for my partition this afternoon :-/) | 00:26 |
| [Solars] | i might be wrong about it rebuilding... entry for /dev/md2 is | 00:27 |
| [Solars] | md2 : inactive sda2[0](s) sdb2[3](s) sdc2[2](s) sdd[2](s) | 00:28 |
| phaidros | hm | 00:28 |
| [Solars] | sdd[2] is new as long with the (s)'s | 00:29 |
| phaidros | why inactive?? | 00:29 |
| [Solars] | doesn't say | 00:29 |
| phaidros | well, I throw the towel .. sorry, no idea | 00:29 |
| === flyback is now known as limpBizkit | ||
| [Solars] | can mdadm check stats? | 00:29 |
| === limpBizkit is now known as flyback | ||
| phaidros | uhm .. wait | 00:29 |
| [Solars] | status | 00:29 |
| phaidros | mdadm --detail or like this | 00:29 |
| phaidros | and mdadm --examine | 00:30 |
| phaidros | detail for mdX, examine for sdX | 00:30 |
| phaidros | or vice versa | 00:30 |
| [Solars] | it just shows the device is not active fter "mdam --details /dev/md2" | 00:31 |
| phaidros | what I would do now is the following: | 00:32 |
| phaidros | stop md2 | 00:32 |
| phaidros | set for all sdX2 devices: mdadm --zero-superblock /dev/sdX2 | 00:32 |
| [Solars] | examining each shows each partition active and part of raid5 | 00:32 |
| phaidros | (which deletes the mdadm conf from the partition) | 00:32 |
| phaidros | and afterward recreate the md2 | 00:33 |
| phaidros | mdadm --create /dev/md2 --level=5 --raid-device=4 /dev/sdX2 /dev/sd2 .. | 00:33 |
| phaidros | mkswap and swapon -s | 00:33 |
| phaidros | if that fails consider something very unusual .. | 00:34 |
| [Solars] | erm does that also recreate /etc/fstab entry | 00:34 |
| phaidros | nope. | 00:34 |
| phaidros | when using mkswap /dev/md2 it tells a new uuid | 00:34 |
| [Solars] | kk | 00:34 |
| [Solars] | brb | 00:34 |
| phaidros | so take that uuid into fstab *or* just write /dev/md2 in fstab :) | 00:34 |
| phaidros | (I used to see the direct device name fail, but can't remember why) | 00:35 |
| [Solars] | everything worked up to "mkswap /dev/md2" | 00:38 |
| [Solars] | "swapon -s didn't work | 00:39 |
| [Solars] | or rather showed nothing | 00:39 |
| phaidros | mkswap worked? | 00:43 |
| phaidros | now try swapon /dev/md0 | 00:43 |
| phaidros | after that you would see something with swapon -s | 00:43 |
| [Solars] | that worked! | 00:44 |
| [Solars] | i copied the UUID to fstab | 00:44 |
| [Solars] | for the mount point for swap should be "none"? | 00:45 |
| phaidros | yes | 00:46 |
| [Solars] | kk lets reboot | 00:46 |
| phaidros | swap is just used be the kernel if ram gets to full | 00:46 |
| phaidros | s/be/by | 00:46 |
| [Solars] | it rebooted | 00:51 |
| [Solars] | and swap worked | 00:51 |
| [Solars] | yay! | 00:51 |
| [Solars] | i guess i'll load up irssi | 00:52 |
| phaidros | :) | 00:53 |
| phaidros | so, 2a.m. here. gotta go | 00:53 |
| * [Solaris]2 waves to [Solars] | 00:59 | |
| * [Solars] waves to [Solaris]2 | 00:59 | |
| [Solaris]2 | this is going to take some getting used to | 01:00 |
| [Solaris]2 | diffentl nees to be configured so ic an see stuff | 01:01 |
| [Solaris]2 | bbl | 01:04 |
| drake_ | erm | 01:11 |
| [Solars] | test | 01:27 |
| drake_ | test | 01:27 |
| elnewb | test | 01:28 |
| [Solars] | working on getting irrsi color scheme working right lol | 01:29 |
| drake_ | test 2.0 | 01:31 |
| [Solars] | looks alot better | 01:31 |
| [Solars] | green/black with linux standard | 01:32 |
| * flyback bbl | 01:34 | |
| === drake_ is now known as [Solaris] | ||
| lukehasnoname | so apparently usermod -G writes OVER the user's current groups | 02:41 |
| lukehasnoname | which is megagay | 02:42 |
| lukehasnoname | so now my (currently) headless server has no sudo-capable user | 02:43 |
| vk5foss | nice work. | 02:43 |
| vk5foss | -a ftw | 02:43 |
| lukehasnoname | ya, after rereading the man page I saw that | 02:43 |
| lukehasnoname | so now my plans for the night must be appended as I cannot setup the VMs I wanted to do, since one of my roommates' brothers stole my server monitor so he could play WoW with us | 02:44 |
| lukehasnoname | how do I install suggests in apt-get? | 03:04 |
| vk5foss | i think you can set it in apt.conf | 03:07 |
| lukehasnoname | eh, like on a case by case | 03:07 |
| lukehasnoname | there are --no-install-recommends and --install-recommends (default) switches | 03:07 |
| vk5foss | or with something like `-o Install::Suggests` | 03:07 |
| === PrivateVoid_ is now known as PrivateVoid | ||
| === vk5foss is now known as kgoetz | ||
| === freaky[t] is now known as fReAkY[t] | ||
| === macd_ is now known as macd | ||
| kraut | moin | 08:49 |
| === mdz_ is now known as mdz | ||
| chmac | kraut: moin moin | 09:47 |
| scuser | hi all, does anyone know which package should I install to get the file /etc/auth-client-config/profile.d/krb-auth-config ? | 09:49 |
| chmac | scuser: I think there's a command that can tell you which files are in which packages | 10:03 |
| chmac | scuser: I'm not sure what it is though! | 10:03 |
| hads | dpkg -L | 10:05 |
| hads | Only for installed packages though so doesn't help the situation. | 10:05 |
| chmac | scuser, hads: http://www.debian.org/doc/FAQ/ch-pkgtools.en.html#s-filesearch | 10:07 |
| hads | scuser, chmac: http://packages.ubuntu.com/ | 10:09 |
| chmac | hads: Neat, I didn't realise there was a filename search on there, useful to know | 10:10 |
| scuser | hi all, can anyone help me with this error "ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)" | 10:38 |
| IOU | i dont know if this is the right place, but does anyone know of any good ways of tracking everything that users do on my server? They log in via SSH | 11:20 |
| philsf | IOU: have you looked into acct? | 11:51 |
| IOU | briefly | 11:51 |
| philsf | IOU: what else do you need? | 11:52 |
| scuser | hi all, does anyone know where could I find libnss-ldap.conf file ? | 13:36 |
| slangasek | doesn't exist in Ubuntu, it's called /etc/ldap.conf instead; do you have documentation that refers to libnss-ldap.conf? | 13:37 |
| === fReAkY[t] is now known as freaky[t] | ||
| milestone | hi all | 13:52 |
| milestone | i have a queation with openldap as the authentication backend. I have installed and configured ldap-auth-config and ldap-auth-client. Authentication works on my ubuntu server | 13:53 |
| milestone | only id -g <users> does not show the users memberships | 13:53 |
| ivoks | zul: ping | 14:02 |
| zul | ivoks: pong | 14:03 |
| ivoks | zul: i have a working drbd setup :) | 14:04 |
| zul | ivoks: really cool? what did you do? | 14:04 |
| ivoks | zul: but, the problem is that it requires changes in kernel and userland | 14:04 |
| ivoks | zul: i skiped 8.2.6 and moved to 8.2.7~rc1 | 14:04 |
| zul | ivoks: shouldnt be a problem I think | 14:04 |
| zul | shouldnt be a problem after beta I think | 14:05 |
| zul | ivoks: can you send me a diff of the kernel changes? | 14:05 |
| ivoks | ok, i'll prepare patches | 14:05 |
| ivoks | zul: sure | 14:06 |
| ivoks | i don't have it atm, but i'll create one | 14:06 |
| zul | ivoks: no problem | 14:06 |
| ivoks | and that bacula bug... it could be a user error | 14:06 |
| zul | which one? :) | 14:06 |
| ivoks | since reported on bacula bug list said that patch fixed a problem | 14:07 |
| ivoks | the one that's stalling 7.1 revison in hardy :D | 14:07 |
| zul | ah the strippath one | 14:07 |
| ivoks | right | 14:07 |
| ivoks | never mind that... first things first - drbd | 14:07 |
| Kamping_Kaiser | milestone, backend to what? | 14:08 |
| ScottK | Any idea why the Ubuntu Server survey asks about how Synaptic can be improved to better support Ubuntu server? | 14:16 |
| Nafallo | ScottK: lol | 14:16 |
| ScottK | Nafallo: In fairness it did say apt/synaptic, but it seems odd to mention it at all. | 14:17 |
| Nafallo | ScottK: s/synaptic/aptitude/ :-) | 14:18 |
| Kamping_Kaiser | no idea. | 14:18 |
| Kamping_Kaiser | i should really get around to doing the survey too | 14:18 |
| stka_3-21 | hi | 14:26 |
| stka_3-21 | I'm close to getting nuts with ubuntu-server 8.04 and TLS. Everytime I set "TLSCipherSuite HIGH:MEDIUM:+SSLv2" the openldap Server isn't starting anymore all I get is "main: TLS init def ctx failed: -1" | 14:28 |
| stka_3-21 | I read al lot of postings in the Web, all with the same problem but no solution | 14:29 |
| Kamping_Kaiser | stka_3-21, drove me nuts as well - and if i was at work, i could look at my notes and tell you what fixed it :\ | 14:31 |
| stka_3-21 | Kamping_Kaiser: so you got a solution? | 14:32 |
| Kamping_Kaiser | stka_3-21, pretty sure we did | 14:32 |
| stka_3-21 | would it be possible that when I give you my e-mail adress that you can give the solution? | 14:33 |
| Kamping_Kaiser | stka_3-21, looks like we dropped that line from the config file. i only have TLSCACertificateFile TLSCertificateFile TLSCertificateKeyFile | 14:33 |
| * Kamping_Kaiser is ssh'd to the host | 14:33 | |
| stka_3-21 | When I remove the line openldap ist starting, but I can't get a connection then with "ldapserch -x -ZZ -H ldap://host.home" | 14:34 |
| stka_3-21 | so there is no TLS connection possible | 14:35 |
| Kamping_Kaiser | do you have the correct cert/key/ca files? | 14:35 |
| stka_3-21 | yes, I verified it three or four times even rebuild the certificates | 14:36 |
| zul | stka_3-21: permissions are correct? | 14:36 |
| stka_3-21 | jes | 14:37 |
| stka_3-21 | yes | 14:37 |
| Kamping_Kaiser | what sort of error do you get connecting? | 14:37 |
| stka_3-21 | mom | 14:37 |
| stka_3-21 | ldap_start_tls: Connect error (-11) | 14:37 |
| Kamping_Kaiser | sorry, /me -=> bed | 14:38 |
| Kamping_Kaiser | good luck with it | 14:38 |
| ScottK | stka_3-21: You really ought to find a way to avoid SSLv2. It's no longer considered cryptographically secure. In Intrepid (I think) openssl is buit without SSLv2 support. | 14:38 |
| stka_3-21 | in /var/log/syslog there is only http://phpfi.com/358271 | 14:38 |
| Kamping_Kaiser | ScottK, thats one reason we dropped the linel from our config | 14:39 |
| Kamping_Kaiser | my memory is it may not even be valid in 2.4, but dont quote me | 14:39 |
| stka_3-21 | ScottK: "gnutls-cli -l" tells me that I can use SSL 3.0 so I change to "SSLv3" but still the same | 14:40 |
| ScottK | OK. I don't have a solution to your problem, just wanted to point that out. | 14:41 |
| stka_3-21 | I would drop the line if I can figure out what to do to get a connection to my openldap via TLS | 14:41 |
| ivoks | in intrepid none of our ssl libraries support sslv2 | 14:43 |
| ScottK | Which is wonderful news. Thanks again for your work on that. | 14:43 |
| ivoks | i was just loud :D | 14:43 |
| stka_3-21 | so what shoud I do to get openldap running with TLS | 14:44 |
| stka_3-21 | this is how it looks now http://phpfi.com/358275 | 14:45 |
| ivoks | so.. problems with ldaps client? | 14:47 |
| stka_3-21 | yes | 14:49 |
| ivoks | both server and client are ubuntu? | 14:50 |
| stka_3-21 | at the moment I try it from the same maschine | 14:50 |
| ivoks | oh... | 14:50 |
| ivoks | telnet localhost 636 works? | 14:51 |
| stka_3-21 | i don't use ldaps | 14:52 |
| stka_3-21 | i did't this befor with suse and debian and it allways worked | 14:53 |
| stka_3-21 | Here are my entries from /etc/ldap/ldap.conf http://phpfi.com/358280 | 14:56 |
| ivoks | are those keys signed? | 14:57 |
| stka_3-21 | self signed | 14:58 |
| ivoks | TLSVerifyClient never | 14:58 |
| ivoks | ? | 14:58 |
| stka_3-21 | I never had any Problems with self signed certificates | 14:58 |
| stka_3-21 | ivoks: that's default | 14:59 |
| stka_3-21 | I can give it a try | 14:59 |
| ivoks | ok | 14:59 |
| ivoks | on client, add: | 14:59 |
| ivoks | TLS_REQCERT allow | 14:59 |
| stka_3-21 | ok | 14:59 |
| stka_3-21 | still the same | 15:01 |
| stka_3-21 | ldap_start_tls: Connect error (-11) | 15:01 |
| ivoks | ok, stop the ldap server on server | 15:01 |
| ivoks | and run it like this: | 15:02 |
| ivoks | sudo slapd -d127 -h "ldap:///" -u openldap -g openldap | 15:02 |
| stka_3-21 | ok is running | 15:03 |
| ivoks | give me a second... | 15:03 |
| felimwhiteley_ | Hi All, I'm trying to troublshoot a bug on Server at the moment (https://bugs.launchpad.net/ubuntu/+source/linux-meta/+bug/273313) | 15:04 |
| uvirtbot | Launchpad bug 273313 in linux-meta "TSC Clocksource Unstable Switches To acpi_pm But Server clock freezes/becomes unusable" [Undecided,New] | 15:04 |
| felimwhiteley_ | Any of you evr run the dbeug kernel, not sure if it give me a more verbose dump of what's going on as of right now I can't find anything | 15:04 |
| ivoks | gnutls-cli -s --insecure -p 389 server_ip | 15:05 |
| ivoks | er... | 15:05 |
| ivoks | without -s | 15:05 |
| stka_3-21 | ok | 15:06 |
| stka_3-21 | mom | 15:06 |
| ivoks | does that work? | 15:06 |
| stka_3-21 | ivoks: the result http://phpfi.com/358285 | 15:07 |
| ivoks | so, the server doesn't do TLS | 15:07 |
| ivoks | can you paste your /etc/ldap/slapd.conf? | 15:07 |
| stka_3-21 | yes mom | 15:07 |
| stka_3-21 | here ist is http://phpfi.com/358286 | 15:08 |
| laga | hi. | 15:10 |
| stka_3-21 | That's the the result from "ls /etc/ssl/zertifikate/" | 15:11 |
| stka_3-21 | demoCA ldapcert.pem ldapkey.pem | 15:11 |
| ivoks | do you see any problems in terminal where you started openldap? | 15:11 |
| laga | soren: did you ever get around to adding proper vbox support to ubuntu-vm-builder? | 15:12 |
| stka_3-21 | no Problem at all. The logfile is clean | 15:12 |
| ivoks | there's no log file | 15:12 |
| ivoks | you started slapd in debugging mode | 15:12 |
| stka_3-21 | in /var/log/syslog | 15:12 |
| ivoks | forget that now | 15:13 |
| stka_3-21 | ok | 15:13 |
| ivoks | check the terminal where you started slapd | 15:13 |
| stka_3-21 | you mean when I start slapd over the cli | 15:13 |
| ivoks | yes | 15:13 |
| ivoks | sudo slapd -d127 -h "ldap:///" -u openldap -g openldap | 15:13 |
| ivoks | you could try with -d64 | 15:14 |
| stka_3-21 | I see all the messages from loding the schema files and the opening of the database | 15:14 |
| soren | laga: Nope. | 15:14 |
| ivoks | stka_3-21: ok, kill that | 15:15 |
| ivoks | stka_3-21: add loglevel 64 to /etc/ldap/slapd.conf | 15:15 |
| ivoks | stka_3-21: and start slapd normaly; /etc/init.d/slapd start | 15:15 |
| laga | soren: why not pull vbox references from ubuntu-vm-builder till it actually works? or are there cases where it works? | 15:15 |
| stka_3-21 | that's waht I get for TLS when starting over cli http://phpfi.com/358288 | 15:16 |
| === hessml|away is now known as hessml|away|away | ||
| soren | laga: AFAICS, the vbox "pluin" in the old ubuntu-vm-builder is a no-op. | 15:16 |
| soren | laga: I don't use VirtualBox myself. I don't know what it needs to work. | 15:16 |
| stka_3-21 | ivoks: that's the result http://phpfi.com/358289 | 15:17 |
| laga | soren: see bug #244309 - it will fail. | 15:17 |
| uvirtbot | Launchpad bug 244309 in ubuntu-vm-builder "ubuntu-vm-builder fails on vm_target_conversion for vm type vbox (dup-of: 218029)" [Undecided,Confirmed] https://launchpad.net/bugs/244309 | 15:17 |
| uvirtbot | Launchpad bug 218029 in ubuntu-vm-builder "ubuntu-vm-builder vbox output defaults to x86 Architecture" [Wishlist,Confirmed] https://launchpad.net/bugs/218029 | 15:17 |
| ivoks | stka_3-21: ok, now connect with gnutls-cli | 15:18 |
| soren | laga: I'm not surprised. What file format does virtualbox use? | 15:19 |
| stka_3-21 | ivoks: here is the result http://phpfi.com/358290 | 15:20 |
| laga | soren: they use some XML to describe the virtual machine and probably a homegrown image format. it can also use vmdk or you can use vditool to convert images AFAIK | 15:20 |
| ivoks | stka_3-21: just for fun, let's enable ldaps | 15:21 |
| stka_3-21 | ok | 15:21 |
| ivoks | stka_3-21: in /etc/default/slapd | 15:22 |
| ivoks | stka_3-21: SLAPD_SERVICES="ldap:/// ldaps:///" | 15:22 |
| stka_3-21 | I dit it an restartet openldap | 15:23 |
| ivoks | stka_3-21: gnutls-cli --insecure -p 636 server_ip | 15:23 |
| stka_3-21 | tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 5418/slapd | 15:23 |
| stka_3-21 | that works :-) | 15:24 |
| ivoks | but that's not what you want | 15:24 |
| stka_3-21 | not realy | 15:24 |
| ivoks | you want TLS over 389 | 15:24 |
| stka_3-21 | yes like I did it befor | 15:25 |
| ivoks | is there a bug about this? | 15:26 |
| stka_3-21 | "ldapsearch -x -ZZ -H ldaps://ldapserver.home.stka" is still not working | 15:26 |
| stka_3-21 | ldap_start_tls: Can't contact LDAP server (-1) | 15:26 |
| ivoks | ldapsearch -x -H ldaps://ldapserver.home.stka | 15:27 |
| stka_3-21 | ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) | 15:29 |
| ivoks | try with IP | 15:29 |
| ivoks | it should work; you've already connected with gnutls-cli | 15:29 |
| stka_3-21 | the same | 15:30 |
| ivoks | and telnet server_ip 636 works? | 15:30 |
| stka_3-21 | Connected to 192.168.123.170. | 15:32 |
| ivoks | check syslog | 15:33 |
| stka_3-21 | nothing | 15:33 |
| ivoks | then your client is broken | 15:33 |
| ivoks | you are missing: | 15:34 |
| ivoks | TLS_REQCERT allow in /etc/ldap/ldap.conf | 15:34 |
| ivoks | on client | 15:36 |
| stka_3-21 | I put it in, yes it was missing | 15:36 |
| ivoks | i guess ldaps works, but ldap (with -Z) doesn't | 15:36 |
| stka_3-21 | But -ZZ forces the Server to authenticate with a certificate | 15:37 |
| ivoks | only if you have TLS_REQCERT demand | 15:38 |
| stka_3-21 | That's what I got now http://phpfi.com/358294 | 15:39 |
| ivoks | report a bug, if it isn't already reported | 15:41 |
| ivoks | i can't look into this deeper atm... | 15:41 |
| stka_3-21 | ivoks: here is the result with a "-d 1 " using ldapsearch http://phpfi.com/358297 | 15:42 |
| ivoks | TLS: peer cert untrusted or revoked | 15:43 |
| stka_3-21 | ivoks: but why? | 15:43 |
| ivoks | did you import server's certificate on the client? | 15:43 |
| stka_3-21 | client and server ist the same maschine | 15:44 |
| ivoks | i know | 15:44 |
| ivoks | but you need to import server's certificate on client, so that client can trust the server | 15:45 |
| stka_3-21 | And normaly I don't need a client certificate | 15:45 |
| ivoks | oh... | 15:45 |
| ivoks | not client certificate | 15:45 |
| ivoks | server's certificate | 15:46 |
| ivoks | how does your client know who is the real server? | 15:46 |
| ivoks | he can't know if it doesn't have some proof | 15:46 |
| ivoks | and that's a certificate | 15:46 |
| ivoks | you'll also need to add openldap user to ssl-cert group | 15:47 |
| stka_3-21 | That was the thing | 15:47 |
| stka_3-21 | I found out what it was | 15:47 |
| stka_3-21 | ivoks: this line "TLS_CACERT /etc/ssl/zertifikate/demoCA/cacert.pem" was missing in /etc/ldap/ldap.conf | 15:48 |
| ivoks | right | 15:48 |
| stka_3-21 | I should not work the day after a marathon run | 15:48 |
| ivoks | that's how you tell your client to trust all certs signed by that key | 15:48 |
| ivoks | great... :) | 15:49 |
| ivoks | so, that's solved | 15:49 |
| ivoks | now, can i get back to drbd? :) | 15:49 |
| stka_3-21 | yes I know. I got that in my workshop as well. But sometimes it ist better to do something esle | 15:49 |
| stka_3-21 | yes it's solved. Thank you so much for youre help | 15:49 |
| ivoks | np | 15:50 |
| stka_3-21 | I think I finish for today and go to bed ;-) | 15:50 |
| laga | soren: i'm looking at the vmware scripts now. vbox support shouldn't be too hard to add. why was a noop vbox template added? | 15:52 |
| soren | laga: I don't remember. | 15:53 |
| soren | laga: Please don't work anymore on ubuntu-vm-builder. | 15:53 |
| soren | laga: It's being replaced with a python implementation. | 15:53 |
| soren | laga: http://launchpad.net/vmbuilder | 15:53 |
| laga | soren: oh. in intrepid? | 15:53 |
| soren | laga: Yes. | 15:53 |
| laga | ah. does trunk work well now? | 15:53 |
| soren | Quite. | 15:54 |
| ivoks | python python clap clap clap :D | 15:54 |
| soren | \o/ | 15:54 |
| laga | looks a lot cleaner than the bash one ;) | 15:56 |
| ivoks | identetion and everything :) | 15:56 |
| laga | if i didnt have so much on my plate already, i would have added vbox support :( | 15:58 |
| soren | laga: Same here :) | 15:59 |
| laga | "We intentionally do not document the specifications of these files, as we must reserve the right to modify them in the future" | 16:02 |
| laga | virtualbox on their xml files. thankls virtualbox | 16:02 |
| laga | "VBoxManage" is a configuration interface. maybe that's going to work | 16:03 |
| soren | laga: If you can come up with a way to take som raw disk images, and some settings (number of cpu's, amount of memory, etc.) and turn that into a virtualbox VM, I'll be happy to do the actual implementation. | 16:16 |
| laga | now that's a plan. i'll get back to you | 16:17 |
| ivoks | hm... guys... | 16:27 |
| ivoks | how about maintaining server team's git for kernel? | 16:27 |
| soren | You don't want to do that. | 16:29 |
| ivoks | i don't :D | 16:30 |
| ivoks | but chuck has it's tree | 16:30 |
| ivoks | i guess i'll send patches to him | 16:31 |
| Rioting_pacifist | !powersave | 16:32 |
| ubottu | Sorry, I don't know anything about powersave | 16:32 |
| Rioting_pacifist | im trying to setup powernowd or a similar powersaving daemon on my old laptop to turn it into a server (it no longer has a screen) but neither cpufreqd or powernowd seam to work | 16:34 |
| Rioting_pacifist | mpd requires x11-common is this right? :S im new to servers but isnt x11 for desktops? | 16:40 |
| ivoks | mpd doesn't require x11-common | 16:42 |
| soren | Yes, it does. | 16:43 |
| soren | by extension. | 16:43 |
| soren | mpd -> libaudio2 -> libxt6 -> libx11-6 | 16:43 |
| ivoks | that might be... | 16:43 |
| Rioting_pacifist | is it better to use xmms2 then as that doesnt seam to require any x11 components? | 16:46 |
| soren | xmms is a gui application. | 16:46 |
| ivoks | xmms2 | 16:46 |
| ivoks | that's a non-gui app | 16:46 |
| ivoks | :D | 16:46 |
| soren | Really? Wow | 16:47 |
| ivoks | having x11-common isn't that strange on servers | 16:47 |
| ivoks | there are some server related services that depend on it | 16:47 |
| * soren nods | 16:47 | |
| Rioting_pacifist | so either is good then? ok thx | 16:48 |
| ivoks | yeah.. i think some fonts pull it in | 16:48 |
| Koon | x11-common is installed on servers now | 16:49 |
| Koon | through openssh-client / xauth (bug 270512) | 16:49 |
| uvirtbot | Launchpad bug 270512 in openssh "openssh-client could suggest xauth rather than recommend it" [Low,Confirmed] https://launchpad.net/bugs/270512 | 16:49 |
| Koon | libx11-6 is installed through wpasupplicant -> libdbus-1-3 -> dbus -> consolekit (bug 270500) | 16:50 |
| uvirtbot | Launchpad bug 270500 in dbus "libdbus-1-3 shouldn't recommend dbus, makes up a heavy minimal seed" [Undecided,New] https://launchpad.net/bugs/270500 | 16:50 |
| ivoks | 'nice' | 16:51 |
| Koon | "yes" | 16:51 |
| * Koon drops out of sight | 16:52 | |
| Rioting_pacifist | isnt that rediculously easy to fix? | 16:52 |
| Koon | Rioting_pacifist: you mean those two bugs ? | 16:52 |
| Koon | Rioting_pacifist: you'd need first that everyone agrees those are bugs and not features. | 16:53 |
| * Koon really drops out of sight now | 16:54 | |
| Rioting_pacifist | 1st one clearly is a bug, the only argument for it is that other software may need it, but if that is the case then the other software will install it openssh does not need xauth so should only suggest it | 16:54 |
| didrocks | jdstrand: around? | 16:57 |
| jdstrand | didrocks: hi! (yes) | 16:57 |
| didrocks | jdstrand: hi! | 16:57 |
| didrocks | jdstrand: did you have the time to have a look at making ufw case insensitive merge proposal? | 16:58 |
| didrocks | (I say that because I make a smarter/better code yesterday that I pushed using list comprehension) | 16:58 |
| jdstrand | didrocks: briefly (sorry for the delay). I plan to look at it more extensively today, and decide whether it can go into intrepid or should be jaunty material | 16:58 |
| didrocks | jdstrand: no pb, just look at the very last commit :) | 16:59 |
| jdstrand | didrocks: either way, I'll likely commit today if their are no issues | 16:59 |
| didrocks | jdstrand: ok, keep me in touch. I always backlog on hl :) | 16:59 |
| jdstrand | didrocks: cool, thanks | 17:00 |
| didrocks | thanks to you! | 17:00 |
| [Solaris] | infinity: /names | 17:19 |
| ivoks | [Solaris]: ? | 17:20 |
| infinity | ...? | 17:21 |
| [Solars] | ivoks... err gotta get used to irrsi .. but anyways had a ton of fun trying to figure out why my /swap partition/raid was inactive and part of it was not "added" at boot up | 17:28 |
| ivoks | added? | 17:29 |
| ivoks | maybe you didn't format it as swap | 17:29 |
| [Solars] | it was missing 1 of the four raid drives | 17:29 |
| ivoks | oh... | 17:29 |
| [Solars] | it all was all formated | 17:29 |
| [Solars] | it was all partitioned | 17:29 |
| [Solars] | basically what we did was | 17:30 |
| [Solars] | ./mdadm --stop /dev/md2 && /mdadm <erased the superblocks on the 4 drives> && /mdadm --create /dev/mda2 <list the partitions) && mksawp /dev/mda2 && swapon /dev/mda2 | 17:31 |
| ivoks | great | 17:31 |
| [Solars] | dunno if i am going to stick with irssi or not kinda annoying at times :P | 17:35 |
| laga | heretic ;) | 17:36 |
| [Solars] | last time before this that i used a cli irc client was bitchx | 17:37 |
| [Solars] | and that was many years ago | 17:37 |
| FFEMTcJ | has anyone downloaded and installed a copy of ubuntu server reciently on a cd? | 20:25 |
| FFEMTcJ | I keep getting an error that a file is corrupt.. ive downloaded a couple times form different servers and made a bunch of cd's to no avail | 20:26 |
| FFEMTcJ | and the most recient cd i made gives an error of there was a prolem reading data from your cd | 20:27 |
| [Solars] | tried burning the cd as slow as possible> | 20:28 |
| FFEMTcJ | [Solars]: i burnt them at 2x.. 1x is the only thing slower | 20:28 |
| [Solars] | worse case scenerio you can get the desktop version, and install the server tools you need and remove the gnome desktop and x | 20:28 |
| [Solars] | sometimes even 1x makes a difference | 20:29 |
| FFEMTcJ | ill try it again | 20:29 |
| FFEMTcJ | ./dists/hardy/main/binary-i386/Packages.gz is showing as failed md5 verification | 20:30 |
| [Solars] | not good then | 20:34 |
| Database | How does one configure Postfix for multiple domains? | 20:40 |
| FFEMTcJ | [Solars]: so burning slower might not fix that? | 20:41 |
| [Solars] | you did a md5 verification on the iso? | 20:47 |
| [Solars] | if the iso checks ok | 20:47 |
| [Solars] | then burning slower may fix it | 20:47 |
| [Solars] | might even try different media | 20:48 |
| === MenZa_ is now known as MenZa | ||
| _ruben | FFEMTcJ: and perhaps the cd burner and/or reader is broken/dieing? | 20:57 |
| ivoks | Database: easily :) | 20:58 |
| Database | Heh. | 20:59 |
| Database | Well, I am a complete n00b to it, so be gentle. :P | 20:59 |
| ivoks | you want an easy way to add new users? | 21:00 |
| Database | Kinda. | 21:00 |
| ivoks | Database: http://www.opensourcehowto.org/how-to/mysql/mysql-users-postfixadmin-postfix-dovecot--squirrelmail-with-userprefs-stored-in-mysql.html | 21:01 |
| Database | Thanks. | 21:01 |
| ivoks | Database: this should be more than good start | 21:01 |
| Database | OOooh. | 21:01 |
| Database | web-based admin panel. | 21:01 |
| Database | I approve of this. | 21:01 |
| ivoks | Database: follow this tutorial only if you don't plan to allow shell access | 21:03 |
| Database | I don't. | 21:03 |
| ivoks | then... great | 21:03 |
| Database | It's only acecssible from inside my network, as well :) | 21:04 |
| Database | ...Ah. | 21:05 |
| Database | I'm using Lighttpd. | 21:05 |
| Database | Does that matter massively? | 21:05 |
| ivoks | that's irrelevant | 21:05 |
| Database | Oh, good. | 21:05 |
| ivoks | you are setting up mail server | 21:05 |
| Database | I know, but I rtfm'd. ;) | 21:06 |
| Database | ... not far enough, apparantly. | 21:06 |
| Database | It does support Lighty. | 21:06 |
| Database | >> | 21:06 |
| Database | Sorry. | 21:06 |
| RediXe | How do I check what service's are running? mainly apache | 21:57 |
| ivoks | telnet localhost 80 | 21:58 |
| [Solars] | ivoks what irc client are you running? | 21:59 |
| === jussi01_ is now known as jussi01 | ||
| RediXe | Yeah, just realized that apache and mysql aren't running... Not sure how to start them either ... they're not in the /etc/init.d/ | 21:59 |
| ivoks | irssi | 21:59 |
| ivoks | RediXe: if they aren't there, then they aren't installed | 21:59 |
| dana_good | RediXe: did you do a LAMP install? | 22:00 |
| [Solars] | ivoks heh figued.. gotta find a client for me :P | 22:00 |
| RediXe | ivoks, They were running before I restarted the server. dana_good, I installed knowledge tree which installs apache and mysql. Just not sure where. | 22:00 |
| ivoks | knowledge tree? | 22:01 |
| ivoks | ? | 22:01 |
| RediXe | Yeah it's a document management system ... I found what I was looking for | 22:02 |
| RediXe | I just need to add the command to start up | 22:03 |
| dana_good | RediXe: that's good, you might want to see if theres a support channel for knowledge tree if its installing things in nonstandard locations | 22:06 |
| cyris| | hey everyone. i have a question regarding a new server I setup just recently. this new server is behind a NAT router. This server uses my isp's name server to resolve queries. Since this machine is behind this NAT router, what would be its proper hostname? | 22:06 |
| RediXe | dana_good, well I was more curious on testing if it was running and something else was the issue. (and there channel is dead) | 22:07 |
| RediXe | How would I add something to start with boot? | 22:08 |
| RediXe | @reboot in crontrab is what I found. | 22:08 |
| RediXe | That doesn't seem right to me | 22:09 |
| dana_good | init.d | 22:09 |
| hads | @reboot is useful if you want to start something as a normal user. | 22:12 |
| hads | I do that for screen sessions | 22:12 |
| mathiaz | RediXe: if you don't have proper init scripts, you can always modify /etc/rc.local | 22:40 |
| RediXe | I'll look into it more tomorrow .. I'm about to be off work for the day. | 22:40 |
| === robnyc is now known as robnyc|R61 | ||
| mathiaz | kirkland: did you add the virtulization task to the installer ? | 23:59 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!